Hello community, here is the log from the commit of package jasper for openSUSE:Leap:15.2 checked in at 2020-06-01 12:09:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/jasper (Old) and /work/SRC/openSUSE:Leap:15.2/.jasper.new.3606 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "jasper" Mon Jun 1 12:09:35 2020 rev:19 rq:810192 version:2.0.14 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/jasper/jasper.changes 2020-01-15 15:12:55.778157987 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.jasper.new.3606/jasper.changes 2020-06-01 12:09:36.342395966 +0200 @@ -1,0 +2,6 @@ +Tue Mar 17 12:38:11 UTC 2020 - Michael Vetter <[email protected]> + +- bsc#1092115 CVE-2018-9154: Fix possible denial of service + Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot() + +------------------------------------------------------------------- New: ---- jasper-CVE-2018-9154.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jasper.spec ++++++ --- /var/tmp/diff_new_pack.F4l3If/_old 2020-06-01 12:09:36.722397161 +0200 +++ /var/tmp/diff_new_pack.F4l3If/_new 2020-06-01 12:09:36.722397161 +0200 @@ -33,6 +33,7 @@ Patch6: jasper-CVE-2018-19542.patch Patch7: jasper-CVE-2018-19540.patch Patch8: jasper-CVE-2018-19541.patch +Patch9: jasper-CVE-2018-9154.patch BuildRequires: Mesa-libGL-devel BuildRequires: cmake BuildRequires: doxygen @@ -93,6 +94,7 @@ %patch6 -p1 %patch7 -p1 %patch8 -p1 +%patch9 -p1 %build export CFLAGS="%{optflags} -Wall -std=c99 -D_BSD_SOURCE" ++++++ jasper-CVE-2018-9154.patch ++++++ Index: jasper-version-2.0.16/src/libjasper/jpc/jpc_dec.c =================================================================== --- jasper-version-2.0.16.orig/src/libjasper/jpc/jpc_dec.c +++ jasper-version-2.0.16/src/libjasper/jpc/jpc_dec.c @@ -485,7 +485,7 @@ static int jpc_dec_process_sot(jpc_dec_t if (!(compinfos = jas_alloc2(dec->numcomps, sizeof(jas_image_cmptparm_t)))) { - abort(); + return -1; } for (cmptno = 0, cmpt = dec->cmpts, compinfo = compinfos; cmptno < dec->numcomps; ++cmptno, ++cmpt, ++compinfo) { @@ -512,7 +512,7 @@ static int jpc_dec_process_sot(jpc_dec_t /* Convert the PPM marker segment data into a collection of streams (one stream per tile-part). */ if (!(dec->pkthdrstreams = jpc_ppmstabtostreams(dec->ppmstab))) { - abort(); + return -1; } jpc_ppxstab_destroy(dec->ppmstab); dec->ppmstab = 0;
